Skip to content
OpenAdvisories

Package · RubyGems

actionmailbox

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.7
    CVE-2026-126068

    Action Mailbox: Possible signature replay in Action Mailbox Mailgun ingress

    Action Mailbox routes incoming emails to controller-like mailboxes for processing in Rails. Prior to 8.1.4.1 and 8.0.5.2, the Action Mailbox Mailgun ingress authenticates a request with an HMAC of the timestamp and token parameters concatenated without a sepa…

    rails rails rails actionmailbox Debian RubyGems